Ryan on Mythryl: “Whilst I’m a bit wary of increasing the security expectations of OSS…”

Whilst I’m a bit wary of increasing the security expectations of OSS maintainers, Jovi has been doing incredible work on this front in fleshing out happy paths amongst the many footguns and workflows without miserable amounts of friction. Really brilliant stuff that can benefit the entire ecosystem

Jovi 🐨@jovidecroock.com

The package you reviewed is not always the package people install. New post: how Drydock uses npm staged publishing + GitHub release gates to put release review at the useful point: after the artifact exists, before it ships. www.jovidecroock.com/blog/drydock...

jovidecroock.comTwo Places to Stop a Bad ReleaseHow Drydock uses npm staged publishing and GitHub release gates to review the package artifact before it can ship.

27/6/26, 11:45 am1 repost5 likes

Post